Privacy Policy
Expert Analysis & Player Rights
Your privacy is paramount. I've analyzed Kingdom Casino's data practices to explain exactly what information is collected, how it's protected, and what rights you have under GDPR and NZ privacy laws.
🔐 Why This Privacy Policy Matters
As a data security expert with over 15 years in the industry, I've reviewed hundreds of casino privacy policies. Kingdom Casino's approach stands out for its transparency and strong adherence to GDPR standards – even for NZ players. Below, I break down every key section with practical insights.
1. Introduction & Scope
Kingdom Casino NZ ("we", "us", "our") is committed to protecting your personal data. This privacy policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services. It applies to all players accessing Kingdom Casino from New Zealand.
Expert note: Kingdom Casino is operated by Kingdom Gaming Limited, licensed by the Malta Gaming Authority. This means they must comply with EU GDPR standards, which are stricter than NZ's Privacy Act. For NZ players, this is an extra layer of protection.
2. Data Controller & Contact
The data controller for your personal information is Kingdom Gaming Limited, registered address: Level 3, The Platinum Building, St Julian's, Malta. For privacy-related inquiries, contact our Data Protection Officer at [email protected].
Response time: Under GDPR, we must respond within 30 days. In my testing, Kingdom's DPO responded in 5 days – well above average.
3. Types of Information We Collect
| Category | Examples | Legal Basis |
|---|---|---|
| Identity Data | Full name, date of birth, passport/NZ driver license | Legal obligation (KYC) |
| Contact Data | Email address, phone number, physical address | Contract performance |
| Financial Data | Payment card details, bank account, transaction history | Contract performance |
| Technical Data | IP address, browser type, device ID, cookies | Legitimate interests |
| Usage Data | Games played, time spent, betting patterns | Legitimate interests |
| Marketing Preferences | Opt-in/opt-out, communication history | Consent |
Expert insight: The "legitimate interests" basis means Kingdom can collect technical data to improve services and prevent fraud – standard practice. Marketing data requires your explicit consent (opt-in checkbox).
4. Purposes of Processing
- Account creation & verification: To set up your account and verify your identity (legal requirement).
- Processing transactions: Handling deposits and withdrawals securely.
- Fraud prevention: Monitoring for suspicious activity – using AI-based systems.
- Responsible gambling: Enforcing self-exclusion and deposit limits.
- Marketing: Sending promotional offers (only if you've opted in).
- Legal compliance: Reporting to authorities if required by law.
5. Cookies and Similar Technologies
Kingdom Casino uses cookies to enhance your experience. Types include:
- Essential cookies: Required for login and security (cannot be disabled).
- Functional cookies: Remember your preferences and language.
- Analytics cookies: Google Analytics to improve site performance.
- Marketing cookies: Track campaigns (only with consent).
You can manage cookie preferences in your browser settings. Disabling essential cookies may prevent site functionality.
6. Who We Share Your Data With
We never sell your personal data. However, we share with trusted third parties:
- Payment processors: Poli, Mifinity, banks – for transaction handling.
- Identity verification services: To comply with KYC requirements.
- Game providers: To deliver games (anonymized data only).
- Regulatory bodies: MGA, NZ authorities if legally required.
- IT service providers: Cloud hosting, email services.
All third parties are contractually bound to protect your data and comply with GDPR.
7. International Data Transfers
Your data may be transferred to servers in Malta (EU) and the United Kingdom. Both jurisdictions have adequate data protection laws recognized by the European Commission. For NZ players, this means your data is protected by EU standards – stronger than local requirements.
8. How Long We Keep Your Data
- Active accounts: Data retained while account is open.
- Closed accounts: Data kept for 5 years to comply with anti-money laundering regulations.
- Marketing data: Until you withdraw consent.
- Technical logs: 12 months for security analysis.
After retention periods, data is securely deleted or anonymized.
9. Your Privacy Rights (GDPR & NZ)
Under GDPR and NZ Privacy Act, you have the following rights:
- Right to access: Request a copy of all data we hold about you.
- Right to rectification: Correct inaccurate information.
- Right to erasure ("right to be forgotten"): Request deletion (subject to legal retention).
- Right to restrict processing: Limit how we use your data.
- Right to data portability: Receive your data in machine-readable format.
- Right to object: Opt-out of marketing or legitimate interest processing.
- Right to withdraw consent: At any time, for consent-based processing.
To exercise rights, email [email protected]. Identity verification required. Response within 30 days (free of charge).
10. Security Measures
Kingdom Casino employs industry-leading security:
- Encryption: 256-bit SSL for all data transmission.
- Firewalls: Enterprise-grade protection against unauthorized access.
- Access controls: Strict internal permissions – employees access only necessary data.
- Regular audits: External security testing every 6 months.
- PCI DSS compliance: For payment card security.
11. Children's Privacy
Kingdom Casino is strictly for players 18+. We do not knowingly collect data from minors. If we discover underage registration, account is terminated and data deleted immediately.
12. Changes to This Policy
We may update this privacy policy periodically. Material changes will be notified via email or site banner. Last updated: February 27, 2026.
✅ Expert Verdict on Privacy
After thorough analysis, I rate Kingdom Casino's privacy practices as 9.5/10. They exceed legal requirements by applying GDPR standards to all NZ players, have transparent data sharing policies, and provide clear rights. The only minor gap is more detailed cookie controls on the site itself (currently managed via browser). Overall, your data is in safe hands.
Last updated: February 27, 2026 | Version 2.2